Replace encrypted_cookie with partial session encrpytion